wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

redsnarf

root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...

trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

The Hitchhikers Guide to Online Anonymity

La guía completa para el anonimato en línea y la OpSec. Bienvenido. Esta es una guía cuyo objetivo es proporcionar una introducción a diversas técnicas de rastreo en línea, técnicas de verificación de identidad en línea y orientación detallada para crear y mantener identidades anónimas...

witchcraft

🎉 Your OPSEC companion. Run witchcraft help or witchcraft manual for the complete manual 🎉 What it does? WITCHCRAFT Are much more than a simple alias, it's a init system that can works with busybox, a shell and automation's and automation's engine for hacking, osint, forensics, etc. NAME witchcra...

onionscan

¿Qué es OnionScan? OnionScan es una herramienta gratuita y de código abierto para investigar la Dark Web. A pesar de todas las increíbles innovaciones tecnológicas en el ámbito del anonimato y la privacidad, siempre existe una amenaza constante que no tiene un parche tecnológico efectivo: el erro...

sitrep

SitRep Extensible, configurable host triage. Purpose SitRep is intended to provide a lightweight, extensible host triage alternative. Checks are loaded dynamically at runtime from stand-alone files. This allows operators to quickly modify existing checks, or add new checks as required. Checks are...

sitrep

SitRep Triaje de host extensible y configurable. Propósito SitRep pretende proporcionar una alternativa ligera y extensible para el triaje de hosts. Las comprobaciones se cargan dinámicamente en tiempo de ejecución desde archivos independientes. Esto permite a los operadores modificar rápidamente...

PayloadAutomation

What is Payload Automation? Now available as a PyPi package: https://pypi.org/project/payload-automation/ Payload Automation is a collection of Python classes to serve as a bridge between Sleep and Python which can be used to help automate payload development, testing, opsec checking, and...

smbtakeover

smbtakeover A technique to unbind and rebind 445/tcp on Windows without loading a driver, loading a module into LSASS, or rebooting the target machine. Implemented to ease the burden of SMB-based NTLM relays while operating over C2. Technical analysis of the technique is dicussed in more detail...

flyphish

Flyphish Flyphish is an Ansible playbook allowing cyber security consultants to deploy a phishing server in the cloud for security assessments. The playbook installs and configures Gophish , Postfix and OpenDKIM on a virtual machine in the cloud. Additionally, for OPSEC purposes, the playbook...

moonwalk

moonwalk: DLL Base Address Finder This Rust library and CLI tool demonstrates an alternative method to find the base address of loaded DLLs without using a Process Environment Block PEB walk. This technique is particularly useful in scenarios where PEB walking might be detected or blocked. Branch...

hawkopsec

HawkOpsec One-tap Linux OPSEC hardening & anonymity toolkit -0b0d10 HawkOpsec turns a pile of manual privacy commands into security modes you apply with one tap. Pick a mode — the tool starts Tor, configures DNS, randomizes your identity and hardens the kernel for you. Hit RESET and every change ...

OffSploit

OffSploit: Autonomous Exploit Adaptation & C2 Framework !Py...

nimrc 1.0.0

nimrm is a native WinRM interactive shell client written in Nim. It's designed to be a compact and fast tool for system administration and authorized security testing. Key features include NTLM and Kerberos authentication, in-memory operations, file transfers, OPSEC awareness, and cross platform...

EUVD-2000-0801

Malware in sbrugna...

OPSEC Failure Exposes Coquettte's Malware Campaigns on Bulletproof Hosting Servers

A novice cybercrime actor has been observed leveraging the services of a Russian bulletproof hosting BPH provider called Proton66 to facilitate their operations. The findings come from DomainTools, which detected the activity after it discovered a phony website named cybersecureprotect.com hosted...

EncryptHub’s OPSEC Failures Expose Its Malware Operation

Outpost24's KrakenLabs reveals EncryptHub's multi-stage malware campaign, exposing their infrastructure and tactics through critical OPSEC failures. Learn how…...

Styx Stealer Creator's OPSEC Fail Leaks Client List and Profit Details

In what's a case of an operational security OPSEC lapse, the operator behind a new information stealer called Styx Stealer leaked data from their own computer, including details related to the clients, profit information, nicknames, phone numbers, and email addresses. Styx Stealer, a derivative o...

LOLSpoof - An Interactive Shell To Spoof Some LOLBins Command Line

LOLSpoof is a an interactive shell program that automatically spoof the command line arguments of the spawned process. Just call your incriminate-looking command line LOLBin e.g. powershell -w hidden -enc ZwBlAHQALQBwAHIAbwBjAGUA.... and LOLSpoof will ensure that the process creation telemetry...